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ABSTRACT 


A digital computer control and abort system which 
is used at NASA -Lewis Research Center's Plum Brook 
Test Facilities is described. The system was 
[2 designed by NASA personnel to control test opera- 
g tlons such as rocket engine testing, structure 
h testing, and wind tunnel tests. Because of the 
nature of spacecraft system testing, particularly 
rocket engine testing, the unique features of the 
system are, control function updating at a 20 mil- 
lisecond rate, continuous abort monitoring and a 
software system designed for short duration tests 
rather than continuous on-line control. To accosh 
pllsh these system requirements, special hardware 
was designed. The presentation will include a 
description of the computer system Including 
special Interface hardware as well as a general 
description of the software used. 


INTRODUCTION 


Many of you here are Involved In propulsion sys- 
tem testing and therefore do recognize the need 
for an automatic sequence control system. There 
are many different control systems in commercial 
use today, however most of these are designed to 
control Industrial type processes, and are not 
suitable for control of aerospace test facilities. 
In aerospace test facilities the control system 
■s required not only to control the test article 
but must also control the test environment. 

Because of the short duration experimental test- 
ing which Involves extremely high energy release 
rates the system must have fast response, high 
reliability, and be easily adapted to changes In 
the experimental test programs. The control sys- 
tem must remotely operate many different valves, 
pumps, motors, and heater circuits. In addition 
to providing test control the system must also 
monitor the test and Insure that the performance 
remains within limits. To be effective In an 
aerospace test facility the system must be made 
flexible enough to readily accomnodate different 
test programs, but not at the sacrifice of 
reliability. 


My presentation will describe a digital computer 
control and abort systaa which has been used very 
successfully at NASA-Lewls Research Center's Plum 
Brook test facility. The system was designed to 
control test operations such as rocket engine 
testing, vehicle structure testing, and wind tun- 
nel tests. 

The computer control system to be described was 
first used to control a test program In the space 
simulation chanfcer. The Spacecraft Propulsion 
Research Facility {Fig. 1) can provide simulated 
space exposure and high altitude firing of space- 
craft propulsion systems and associated equipment. 
The vacuum test chanfcer Is 38 feet in diameter and 
50 feet high. It has an ultimate clean dry vac- 
uum level of 5 x 10” 8 torr. The chanter Is 
equipped with a liquid-nitrogen-cooled heat. sink, 
and with a thermal radiation simulator consisting 
of quartz Infrared lamps which provide a radiant 
flux of 130 watts per square foot on a test article 
22 feet In dlemater and 30 feet high. The chanter 
Is vertically oriented within the test building, 
and Is equipped with a hinged top cover 27 feet In 
diameter to allow for Installation of the test 
article. Test engines are fired downward through 
a water-cooled stainless steel exhaust diffuser 
duct 11 feet in diameter and 37 feet long. It has 
an 11 -foot diameter quick opening valve at the 
lower end of the duct which opens at a maximum 
rate of .4 sec to lOOt open. The duct Is contained 
within, and discharges Into a concrete spray cham- 
ber which Is 67 feet in diameter and 119 feet deep, 
and contains 1,750,000 gallons of water. Water In 
the spray chamber can be cooled to 40°F and is cir- 
culated through a spray system at 240,000 gallons 
per minute to provide for cooling of the exhaust 
duct, exhaust gases, and condensation of water 
vapor In the exhaust products. Noncondensables 
are exhausted by means of a three-stage steam 
ejector system. The exhaust system Is capable of 
handling 100,000 pound thrust hydro gen -oxygen 
engines at an exhaust diffuser discharge pressure 
of 1 .7 psla. 
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Currently we are testing a modified Centaur space 
vehicle with two RL-10 hydrogen-oxygen engines. 

The purpose of the tests are to Increase the 
vehicle's mission flexibility by providing the 
capability for a third engine start after a 5*s 
hour coast to synchronous apogee. This new con- 
figured Centaur will be boosted Into earth orbit 
by a Titan vehicle. 

The requirements for the sequence and abort system 
for this test program are to control 47 on-off 
facility end 20 vehicle functions such as valves, 
pumps, and heater circuits, to generate 10 marker 
signals for data recording and to provide changes 
In setpoints on 4 pressure control systems. The 
sequence and abort system must monitor for abort 
purposes, 20 facility and 30 vehicle parameters. 
Because of extreme fast response of the test pro- 
gram, specifically the RL-10 engine firings, the 
sequence and abort system must be able to change 
Its output coamands at a 20 millisecond rate. It 
also must monitor the test parameters fbr abort 
purposes at a near continuous rate with the capa- 
bility to arm or disarm Individual Input para- 
meters at a 20 millisecond rate. 

To accomplish the described task we use a 
Scientific Data Systems 910 computer equipped with 
standard and special design Interface hardware. 

The standard Interface hardware consists of a 
paper tape reader and punch, card reader, line 
printer, local and remote typewriter, CRT display, 
10 channel D/A and 2 magnetic tape units. The 
special Interfaces were designed and built by NASA 
personnel . For on-off control of the test opera- 
tion a special output relay Interface was de- 
signed, providing the computer with the capability 
of simultaneously operating any one or all of the 
192 relays used In the test sequence. To provide 
sequence “Holds" fbr different test events, the 
computer makes use of a special Input Interface 
that allows It to tost any one of 24 input sig- 
nals. To monitor the test operation for abort 
purposes, the computer uses a special Interface 
referred to as the abort monitor. A block diagram 
of the Abort Monitor Is shown In Figure 2. The 
Abort Monitor receives Its Input signals from the 
test facility In the form of Individual parallel 
analog signal lines. When the signal enters the 
Abort Monitor, It Is compared to a setpoint volt- 
age which represents the abort level. The output 
from the electronic comparator Is a digital "1” 
for an Input signal greater than the setpoint, and 
a digital "0" for one less than the setpoint. 

This digital signal Is now strobed Into a storage 
register at a 250 KHZ rate, the reason fbr this 
"data register" will be explained later. The 
Abort Monitor contains two other storage registers, 
the “control register," and the “mask register." 
The “control register" contains the test require- 
ments In digital form for all abort channels 
while the "mask register" Indicates an armed or 
disarmed condition fbr each abort channel, “0“ fbr 
armed and “1" for disarmed or masked out. The 
Information stored In the "control register" and 
the "mask register" Is changed as required by the 
computer. The three registers are combined In an 


exclusive "OR" resulting In an output which Is a 
digital "0" for a go condition and a "1" for an 
abort condition. When an abort occurs, an 
Interrupt is Issued to the computer and the "data 
register" Is frozen, by turning off the 250 KHZ 
clock to save the Input signals and thereDy 
making It possible for the computer to output the 
cause(s) of the abort on the "CRT," printer, or 
typewriter. It must be enphaslzed that the Abort 
Monitor accepts and compares each abort channel In 
a parallel rather than a serial or sampled data 
manner. This comparison Is Independent of the 
computer ami Is continuous and only Interrupted 
for 16 microseconds when the computer changes the 
"control register" or "mask register." Without 
this type of abort monitor the speed of our com- 
puter would not have been adequate to control this 
test program. 

The proper operation of the computer and abort 
monitor Is assured by a device called a "watchdog 
timer." The "watchdog timer" receives special 
signals from the computer and abort monitor at 
regular Intervals. Upon failure of either of 
these signals It will send an abort Interrupt to 
the computer and will cause a nonsequence shutdown 
of critical test Items. 

A computer program to take full advantage of the 
standard and special Interface hardware vias 
written. This program accepts all of the test 
requirements prior to the start of the test 
sequence. Information Is checked by the computer 
for format and order, then stored for use during 
the test automatic sequence. The computer program 
Is started when the facility manual prerun check 
sheet Items are completed and all computer con- 
trolled Items are switched to the program mode. 

At this point the computer checks the 
signals fbr an Initial condition "go," receiving 
this, the computer gives the test conductor a 
ready light. Only at this time may the Test 
Conductor start the test. Upon "start" Initiation 
the conputer, following Its stored test sequence, 
changes output relay states and abort monitor 
"control register" and "mask register" data at the 
required time during the entire test sequence. If 
at any tine, during the test sequence, an abort 
Interrupt Is received from the abort monitor, the 
computer will Immediately stop the run sequence 
and execute an abort sequence. While performing 
the abort sequence, the conputer reads the frozen 
data In the abort monitor and outputs the cause of 
the abort. At the completion of the test sequence 
the facility Is returned to manual control for a 
manual check sheet clean up and shutdown. 

A recent addition to the computer system Is a 
CF-16A mini-computer. This mini -computer Is pro- 
gramed to operate as an abort monitor and can be 
used. In place of, or with, the hardware abort 
monitor for slow response input signals. As In the 
case of the hardware abort monitor^ the CF-16A runs 
Independent of the 910 computer comparing input 
data to the stored limits, and as before, an abort 
Interrupt Is sent to the 910 computer if an out of 
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Unit condition occurs. The difference In the 
two techniques Is that the CF-16A uses a stored 
value for the abort limit rather than a setpoint 
voltage. However, the CF-16A Inputs and compares 
the data by a serial method and therefore Is 
slower than the parallel method used In the hard- 
ware abort monitor. 


CO NCLUSIONS 

The sequence and abort system which has been 
described In this paper has been used very suc- 
cessfully for two years at the Spacecraft 
Propulsion Research Facility. By changing patch- 
boards and Inputting a different set of test 
requirement cards. It has been used to control 
hypersonic tunnel tests and will be used for 
structure testing of the Viking shroud. We have 
found the system flexible making it possible to 
change test requirements between passes, thus 
making It possible to perform many different test 
sequences during one facility countdown. Testing 
In titls wanner, wc have reduced test operation 
manpower. Improved test repeatability and have 
been able to perform more complex test procedures 
with eonpTcte safety. 
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